All CWE Vulnerabilities
Browse our comprehensive database of Common Weakness Enumeration (CWE) vulnerabilities
CWE-909: Missing Initialization of Resource
Learn about CWE-909 (Missing Initialization of Resource), its security impact, exploitation methods, and prevention guidelines.
Likelihood: Not specified
CWE-91: XML Injection (aka Blind XPath Injection)
Learn about CWE-91 (XML Injection (aka Blind XPath Injection)), its security impact, exploitation methods, and prevention guidelines.
Likelihood: Not specified
CWE-910: Use of Expired File Descriptor
Learn about CWE-910 (Use of Expired File Descriptor), its security impact, exploitation methods, and prevention guidelines.
Likelihood: Not specified
CWE-911: Improper Update of Reference Count
Learn about CWE-911 (Improper Update of Reference Count), its security impact, exploitation methods, and prevention guidelines.
Likelihood: Not specified
CWE-912: Hidden Functionality
Learn about CWE-912 (Hidden Functionality), its security impact, exploitation methods, and prevention guidelines.
Likelihood: Not specified
CWE-913: Improper Control of Dynamically-Managed Code Resources
Learn about CWE-913 (Improper Control of Dynamically-Managed Code Resources), its security impact, exploitation methods, and prevention guidelines.
Likelihood: Not specified
CWE-914: Improper Control of Dynamically-Identified Variables
Learn about CWE-914 (Improper Control of Dynamically-Identified Variables), its security impact, exploitation methods, and prevention guidelines.
Likelihood: Not specified
CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes
Learn about CWE-915 (Improperly Controlled Modification of Dynamically-Determined Object Attributes), its security impact, exploitation methods, and prevention guidelines.
Likelihood: Not specified
CWE-916: Use of Password Hash With Insufficient Computational Effort
Learn about CWE-916 (Use of Password Hash With Insufficient Computational Effort), its security impact, exploitation methods, and prevention guidelines.
Likelihood: Not specified
CWE-917: Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
Learn about CWE-917 (Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')), its security impact, exploitation methods, and prevention guidelines.
Likelihood: Not specified
CWE-918: Server-Side Request Forgery (SSRF)
Learn about CWE-918 (Server-Side Request Forgery (SSRF)), its security impact, exploitation methods, and prevention guidelines.
Likelihood: Not specified